Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: h9F+8qMSOcIJEfSrTiZEGpGLdDUu3YCR1OJdCCPZcAo=
Subject key identifier: E1:9C:6D:4A:EA:53:6F:7B:B4:8E:10:A1:F8:AB:4A:55:D7:65:0A:B3
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 019923D5BBEEDE499D69C354C13B5FD8E417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 11:00:33 +0000
Manifest this update: Sun 07 Sep 2025 11:00:33 +0000
Manifest next update: Mon 08 Sep 2025 11:00:33 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: LDdPMDQeVkF6hDgGt13aaJSv2hSMfkmBG4wBZcjX6k8=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:bb:ee:de:49:9d:69:c3:54:c1:3b:5f:d8:e4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Sep 7 11:00:33 2025 GMT
Not After : Sep 8 11:00:33 2025 GMT
Subject: CN=e19c6d4aea536f7bb48e10a1f8ab4a55d7650ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:dc:b0:f3:c3:62:ed:58:b6:a4:13:7b:7b:
e8:a1:95:5e:54:f9:0c:dd:9d:b8:c2:ac:5e:2d:30:
c9:94:21:17:48:c4:6b:53:f9:e5:8d:4e:04:07:57:
f0:b2:13:7e:17:20:68:31:67:d4:c6:26:8b:a0:a1:
0e:1e:fe:c9:b5:89:60:cf:b9:d1:a5:55:43:7d:f4:
38:10:f7:a8:de:cd:8e:8a:a3:97:1b:7b:92:ba:f9:
f4:a3:13:a4:53:d7:09:69:9e:e4:a3:64:1d:02:53:
ab:48:a3:ff:2e:57:cf:ae:18:f4:d2:07:6b:81:2c:
e5:0c:17:2b:bd:c3:fd:73:20:90:80:7f:d8:94:77:
36:66:d9:95:e7:c1:86:fd:a9:58:b2:e0:c1:81:86:
5e:b8:5d:3b:a2:35:f2:f1:ee:bd:35:b0:8e:95:a9:
b7:58:b0:38:e5:ce:9f:9b:41:0a:7c:88:b0:f9:20:
7a:93:a2:8e:93:b1:8e:bf:ed:fe:a8:78:cd:b8:5c:
4f:90:81:dd:c0:b1:17:45:f7:29:7f:9c:f7:5b:28:
34:12:a9:af:66:f4:95:a4:54:37:8f:9c:5c:82:12:
4c:ca:2c:a3:ee:8e:a5:ae:c9:3a:e8:33:e7:9c:a9:
f7:4d:02:1b:e4:51:bd:37:53:a2:03:d0:f5:63:da:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:6D:4A:EA:53:6F:7B:B4:8E:10:A1:F8:AB:4A:55:D7:65:0A:B3
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b8:fb:0b:13:30:b3:8d:70:45:f0:6f:be:93:b9:2b:51:6b:
a5:b9:2d:4a:2a:33:45:d8:c2:e2:61:b9:85:7c:6f:d3:f0:9f:
74:4b:cb:f8:01:72:dd:34:f0:df:8a:f3:7a:e7:ff:a6:f6:d1:
08:78:a5:bd:96:07:7e:43:dc:77:e9:77:f8:f2:7a:b7:79:e0:
c1:a8:1a:a9:64:19:fd:3e:aa:0a:10:69:d2:c1:20:00:aa:37:
a8:6f:91:1c:70:15:d0:a5:c7:9e:3f:a6:5f:e4:06:4c:90:71:
80:68:d8:76:bd:34:4a:b8:fa:83:5a:d5:74:a0:d6:b4:fa:58:
d2:a4:8d:e9:1c:3a:0d:90:e0:85:0b:6f:d0:aa:11:79:59:f8:
19:ea:86:36:5e:9c:58:30:43:5c:1c:04:e5:2b:25:9b:de:2a:
c7:46:ce:2a:46:3a:11:ce:4e:f1:a3:d1:df:2a:92:a0:c5:01:
ae:a3:08:67:fd:7c:02:dc:57:e0:9e:a8:af:a4:ce:27:fd:f8:
94:2f:2c:5a:24:09:e3:ec:5d:9f:e1:17:66:cc:99:c7:70:02:
91:9f:4d:a6:ca:7b:2a:c4:73:b1:4d:cb:c3:7b:be:95:6b:d0:
f2:37:56:d0:e1:ad:62:b3:d4:f1:e9:de:78:ff:84:7c:dc:fa:
5e:75:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:41 2025 by rpki-client